The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the 'spark' CLI tool to retrieve calendar data through commands like spark events and spark availability. These operations are consistent with the skill's described purpose of analyzing meeting loads and availability.
[INDIRECT_PROMPT_INJECTION]: The skill processes meeting titles and schedule data from the calendar to generate audit metrics. This represents an ingestion point for untrusted data (event titles). However, the skill lacks capabilities that would make this surface exploitable, such as file-write or unauthorized network operations.
Ingestion points: Meeting titles and event metadata retrieved from the calendar via CLI tools.
Boundary markers: None identified.
Capability inventory: Read-only access to calendar events and availability; local computation of time metrics.
Sanitization: No explicit sanitization or escaping of event titles is performed.

spark-recipe-calendar-audit